134 lines
2.3 KiB
Go
134 lines
2.3 KiB
Go
package main
|
|
|
|
import (
|
|
"database/sql"
|
|
"errors"
|
|
"log"
|
|
"strings"
|
|
|
|
_ "github.com/mattn/go-sqlite3"
|
|
)
|
|
|
|
func encodePrivs(privs map[string]bool) string {
|
|
lenP := 0
|
|
for priv := range privs {
|
|
if privs[priv] {
|
|
lenP++
|
|
}
|
|
}
|
|
|
|
ps := make([]string, lenP)
|
|
|
|
i := 0
|
|
for priv := range privs {
|
|
if privs[priv] {
|
|
ps[i] = priv
|
|
|
|
i++
|
|
}
|
|
}
|
|
|
|
r := strings.Join(ps, "|")
|
|
|
|
return r
|
|
}
|
|
|
|
func decodePrivs(s string) map[string]bool {
|
|
ps := strings.Split(s, "|")
|
|
|
|
r := make(map[string]bool)
|
|
|
|
for i := range ps {
|
|
if ps[i] != "" {
|
|
r[ps[i]] = true
|
|
}
|
|
}
|
|
|
|
return r
|
|
}
|
|
|
|
// Privs returns the privileges of a player
|
|
func Privs(name string) (map[string]bool, error) {
|
|
db, err := authDB()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer db.Close()
|
|
|
|
var eprivs string
|
|
err = db.QueryRow(`SELECT privileges FROM privileges WHERE name = $1;`, name).Scan(&eprivs)
|
|
if err != nil && !errors.Is(err, sql.ErrNoRows) {
|
|
return make(map[string]bool), err
|
|
}
|
|
|
|
return decodePrivs(eprivs), nil
|
|
}
|
|
|
|
// Privs returns the privileges of a Conn
|
|
func (c *Conn) Privs() (map[string]bool, error) {
|
|
return Privs(c.Username())
|
|
}
|
|
|
|
// SetPrivs sets the privileges of a player
|
|
func SetPrivs(name string, privs map[string]bool) error {
|
|
db, err := authDB()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer db.Close()
|
|
|
|
_, err = db.Exec(`INSERT INTO privileges (
|
|
name,
|
|
privileges
|
|
) VALUES (
|
|
$1,
|
|
$2
|
|
);`, name, encodePrivs(privs))
|
|
_, err = db.Exec(`UPDATE privileges SET privileges = $1 WHERE name = $2;`, encodePrivs(privs), name)
|
|
|
|
return err
|
|
}
|
|
|
|
// SetPrivs sets the privileges of a Conn
|
|
func (c *Conn) SetPrivs(privs map[string]bool) error {
|
|
return SetPrivs(c.Username(), privs)
|
|
}
|
|
|
|
// CheckPrivs reports if a player has all of the specified privileges
|
|
func CheckPrivs(name string, req map[string]bool) (bool, error) {
|
|
privs, err := Privs(name)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
for priv := range req {
|
|
if req[priv] && !privs[priv] {
|
|
return false, nil
|
|
}
|
|
}
|
|
|
|
return true, nil
|
|
}
|
|
|
|
// CheckPrivs reports if a Conn has all of the specified privileges
|
|
func (c *Conn) CheckPrivs(req map[string]bool) (bool, error) {
|
|
return CheckPrivs(c.Username(), req)
|
|
}
|
|
|
|
func init() {
|
|
if admin, ok := ConfKey("admin").(string); ok {
|
|
privs, err := Privs(admin)
|
|
if err != nil {
|
|
log.Print(err)
|
|
return
|
|
}
|
|
|
|
privs["privs"] = true
|
|
|
|
if err = SetPrivs(admin, privs); err != nil {
|
|
log.Print(err)
|
|
return
|
|
}
|
|
}
|
|
}
|